added spec for user controller